General
- Target 2026-10-08_212bcc91f4f61d078d7530ca87b52956_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe.mei
- Size 4.4MB
- Sample261017-aap1qscb83
- SHA256 d4e8c4a7cdcdca624a040b53382f6b7e8fb881a080054ea77db0528135659e5a
- MD5 212bcc91f4f61d078d7530ca87b52956
- SHA1 66f271dd278abc824f10c6698450fe8c7d010359
- SHA512 bb439da5a3e691c31a41aad25668878e75a05fba3084d2d8881fe4411f5a244b3134ae982987b15402436fc3840c9fdf534157b3069dd4f0b1313329e97b5d68
- SSDEEP 98304:PG1G5cgk3zZXWkkJ/hK2XPb+V8EzmBmhzA2ZpXGPsXmn:gG5chzZXWkkJ/hK2jQFmBmhzA2ZpXGkM
- TLSH T11F26AE46B3A801B8C177C178CA569607E7B27848136197DF13E0A6B92F737E16B3E352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_212bcc91f4f61d078d7530ca87b52956_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_212bcc91f4f61d078d7530ca87b52956_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_212bcc91f4f61d078d7530ca87b52956_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe.mei
- Size 4.4MB
- SHA256 d4e8c4a7cdcdca624a040b53382f6b7e8fb881a080054ea77db0528135659e5a
- MD5 212bcc91f4f61d078d7530ca87b52956
- SHA1 66f271dd278abc824f10c6698450fe8c7d010359
- SHA512 bb439da5a3e691c31a41aad25668878e75a05fba3084d2d8881fe4411f5a244b3134ae982987b15402436fc3840c9fdf534157b3069dd4f0b1313329e97b5d68
- SSDEEP 98304:PG1G5cgk3zZXWkkJ/hK2XPb+V8EzmBmhzA2ZpXGPsXmn:gG5chzZXWkkJ/hK2jQFmBmhzA2ZpXGkM
- TLSH T11F26AE46B3A801B8C177C178CA569607E7B27848136197DF13E0A6B92F737E16B3E352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger